【已复现】Fastjson 1.2.66–1.2.83 JsonType 纯库一键 RCE（AutoType 关闭仍可利用；完整 RCE 需 JDK8 + Spring Boot LaunchedURLClassLoader）。仅限授权安全研究与本地防御验证。
☆51Jul 21, 2026Updated this week
Alternatives and similar repositories for 2026FastjsonPoC
Users that are interested in 2026FastjsonPoC are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Docker lab + one-payload exploit + defensive scanner for the fastjson 1.2.66-1.2.83 @JSONType remote-class-load RCE (SSRF->defineClass un…☆164Updated this week
- 基于W01fh4cker大佬的LearnJavaMemshellFromZero从零掌握java内存马的复现重组版本。☆94Jun 15, 2026Updated last month
- Luvv-MCP 是一个 AI 原生的前端安全分析引擎，接入 Claude Code 后，你说一句"帮我审计这个网站"，AI 就能自动完成技术栈识别（1.8 万条规则覆盖 CMS/框架/CDN/中间件）、泄露扫描（阿里云 AK、GitHub Token、Webhoo…☆28Jun 12, 2026Updated last month
- Fastjson 1.2.68 ~ 1.2.83 RCE☆51Updated this week
- dnslog reverse vul-verify 反连平台 漏洞验证☆16Jul 6, 2020Updated 6 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- 一些Java RASP demo☆11Sep 26, 2019Updated 6 years ago
- Springboot的一个webshell☆45Jul 10, 2019Updated 7 years ago
- ☆36Dec 12, 2022Updated 3 years ago
- QQ小程序反编译逆向/微信小程序反编译逆向/红队攻击面分析/快速漏洞/检查/筛查☆61Jun 13, 2026Updated last month
- vshell-firewall is a flexible, high-performance TCP proxy service designed to block fingerprinting and reconnaissance attempts targeting …☆17Jan 7, 2026Updated 6 months ago
- Java反序列化漏洞学习☆14Jul 1, 2021Updated 5 years ago
- PHP文件上传50+绕过手法全景解析☆18Mar 16, 2025Updated last year
- 内存马查杀工具，尤其针对Agent型，原理是dump出JVM当前的class并进行字节码分析，并加入自动修复的功能☆184May 10, 2023Updated 3 years ago
- ☆18Jun 7, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- geoserver CVE-2024-36401漏洞利用工具☆46Jul 24, 2024Updated 2 years ago
- 一些POC、EXP☆11Nov 4, 2019Updated 6 years ago
- 编码解码工具☆21Jan 7, 2025Updated last year
- jwtCracker是一款go语言编写的jwt常见安全问题利用工具☆24May 8, 2024Updated 2 years ago
- 入侵痕迹清理/Cleaning up traces of intrusion☆250Jul 15, 2026Updated last week
- VMware vCenter(Unauthenticated)☆18Nov 2, 2020Updated 5 years ago
- 二进制漏洞扫描☆25Sep 16, 2025Updated 10 months ago
- 内网安全从零开始红队教程，这可能是国内最系统最适合小白的内网安全教程。☆47Sep 25, 2023Updated 2 years ago
- A customized spectator HUDs for CS2, Eclipse Hud Manager 6☆13Apr 17, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Bypassing AV, EDR, Application Whitelisting and ASR Rules☆13Apr 18, 2023Updated 3 years ago
- Docker版本的BlueLotus XSSReceiver(包含源代码) - The BlueLotus XSSReceiver with Dockerfile.☆15Nov 23, 2023Updated 2 years ago
- 冰蝎3 流量 分析解密工具☆15Jan 8, 2022Updated 4 years ago
- ☆22Apr 16, 2026Updated 3 months ago
- 让fscan再次伟大☆358Jun 18, 2026Updated last month
- ☆297May 7, 2022Updated 4 years ago
- pwntools for go!☆12Jul 14, 2019Updated 7 years ago
- An Improved Proof of Concept for CVE-2022-1388 w/ an Interactive Shell☆14May 25, 2025Updated last year
- 安全方向知识点(包含web攻防、java攻防、企业安全、内网/域、提权、免杀)☆48Dec 25, 2024Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 创建服务持久化☆109Apr 26, 2021Updated 5 years ago
- Windows Api调用，用来绕过杀软添加用户☆22May 15, 2021Updated 5 years ago
- java-web 自动化鉴权绕过☆380Apr 3, 2025Updated last year
- 用于若依和Jeecg数据库中密码的爆破☆22Jul 19, 2025Updated last year
- frp修改版，增加socks、pf命令，便捷启用socks5代理、端口转发， 且去除流量特征，增加loadini命令，支持命令行参数导入base64编码的配置文件☆102Dec 5, 2021Updated 4 years ago
- ☆55Dec 29, 2021Updated 4 years ago
- 6万字奶爸级WebGoat8.X代码审计大全，全文均可复现，适合刚学完JAVASE准备开始代码审计的师傅🌟☆167Jun 15, 2026Updated last month